CVE-2010-3192

Medium

Description

Certain run-time memory protection mechanisms in the GNU C Library (aka glibc or libc6) print argv[0] and backtrace information, which might allow context-dependent attackers to obtain sensitive information from process memory by executing an incorrect program, as demonstrated by a setuid program that contains a stack-based buffer overflow error, related to the __fortify_fail function in debug/fortify_fail.c, and the __stack_chk_fail (aka stack protection) and __chk_fail (aka FORTIFY_SOURCE) implementations.

SeverityMedium
CVSS5.0
Exploit probability—
ProductGnu Glibc
PublishedOct 14, 2010
First seenOct 14, 2010

How to fix

Update
  • gnu glibc2.26 or later

Affected products

ProductAffected versionsFixed in
gnu glibcv < 2.262.26

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.